** fetch directives** are used in a header and control locations from which certain resource types may be loaded. For instance, allows developers to allow trusted sources of script to execute on a page, while controls the sources of web fonts.

All fetch directives fall back to . That means, if a fetch directive is absent in the CSP header, the user agent will look for the default-src directive.

See Fetch directives for a complete list.

See also

Related glossary terms:

• Reference

  • Fetch directives specification